seth brundle
Topic Starter
hi guys i just started using the hijack this! program ive heard alot of good things about it and the awesome help one could find here anyways it would be of emense help if someone could check out my log and see what's wrong with it, since i get all this HTML tags in there that im sure are fishy "http://parked.directnic.com" for example.thanks again here is my log…..
Logfile of HijackThis v1.99.1
Scan saved at 4:05:46 AM, on 10/29/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\NICServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Common Files\AOL\1156536591\ee\AOLSoftware.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\K-Meleon\loader.exe
C:\Program Files\K-Meleon\k-meleon.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\OdHost.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\WPC54Cfg.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\Sarah\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://att.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {4667C01D-45EF-AF68-E39C-ECD756E128ED} - C:\WINDOWS\system32\ndbsflqi.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {B6DE3CF2-3283-5E35-C7AB-D3A1D742E08D} - C:\WINDOWS\system32\cqoeqoqx.dll (file missing)
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O2 - BHO: (no name) - {FD8BF5C4-1C41-AE8A-AB82-F19F651E34CC} - C:\WINDOWS\System32\zxnzcaal.dll
O2 - BHO: (no name) - {FFB396FA-C65B-DBED-5114-1C93C0FF9F48} - C:\WINDOWS\System32\udmpgdvd.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [the domain beneditutti.com is under construction</ti] c:\WINDOWS\System32\<title>the domain beneditutti.com is under construction
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [http://parked.directnic.com/newstyle.css" type="text/c] c:\WINDOWS\System32\http://parked.directnic.com/newstyle.css" type="text/css">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscri] c:\WINDOWS\System32\[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscript">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.c] c:\WINDOWS\System32\[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.com">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ ·http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel] c:\WINDOWS\System32\ ·http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel
O4 - HKCU\..\Run: [ ·http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel] c:\WINDOWS\System32\ ·http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel
O4 - HKCU\..\Run: [ ·http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map
<] c:\WINDOWS\System32\ ·http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscri] c:\WINDOWS\System32\[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscript">
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.c] c:\WINDOWS\System32\[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.com">
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp /HIDEBL
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: K-Meleon Loader.lnk = C:\Program Files\K-Meleon\loader.exe
O4 - Global Startup: Wireless-G Notebook Adapter with SpeedBooster Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\Startup.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tri…Transporter.cab?
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {DFABA77C-F8BB-4AB9-BED7-7D48AE103E24} - http://www.myfreeicons.com/cabs/bs4-htgy.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail
Logfile of HijackThis v1.99.1
Scan saved at 4:05:46 AM, on 10/29/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\NICServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Common Files\AOL\1156536591\ee\AOLSoftware.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Yahoo!\YOP\yop.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Yahoo!\browser\ybrwicon.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\Yahoo!\browser\ycommon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\K-Meleon\loader.exe
C:\Program Files\K-Meleon\k-meleon.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\OdHost.exe
C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\WPC54Cfg.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Documents and Settings\Sarah\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dellnet.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/…/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://att.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaul…//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://channels.aimtoday.com/search/aimtoolbar.jsp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/…//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {4667C01D-45EF-AF68-E39C-ECD756E128ED} - C:\WINDOWS\system32\ndbsflqi.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {B6DE3CF2-3283-5E35-C7AB-D3A1D742E08D} - C:\WINDOWS\system32\cqoeqoqx.dll (file missing)
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O2 - BHO: (no name) - {FD8BF5C4-1C41-AE8A-AB82-F19F651E34CC} - C:\WINDOWS\System32\zxnzcaal.dll
O2 - BHO: (no name) - {FFB396FA-C65B-DBED-5114-1C93C0FF9F48} - C:\WINDOWS\System32\udmpgdvd.dll
O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll
O3 - Toolbar: AIM Search - {40D41A8B-D79B-43d7-99A7-9EE0F344C385} - C:\Program Files\AIM Toolbar\AIMBar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [the domain beneditutti.com is under construction</ti] c:\WINDOWS\System32\<title>the domain beneditutti.com is under construction
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [http://parked.directnic.com/newstyle.css" type="text/c] c:\WINDOWS\System32\http://parked.directnic.com/newstyle.css" type="text/css">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscri] c:\WINDOWS\System32\[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscript">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.c] c:\WINDOWS\System32\[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.com">
O4 - HKLM\..\Run: [
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ ] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [ ·http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel] c:\WINDOWS\System32\ ·http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel
O4 - HKCU\..\Run: [ ·http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel] c:\WINDOWS\System32\ ·http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel
O4 - HKCU\..\Run: [ ·http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map
<] c:\WINDOWS\System32\ ·http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ <] c:\WINDOWS\System32\
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscri] c:\WINDOWS\System32\[image unavailable: image]http://stats.directnic.com/tracker.php?a=noscript">
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.c] c:\WINDOWS\System32\[image unavailable: image]http://parked.directnic.com/tiger.php?host=beneditutti.com">
O4 - HKCU\..\Run: [
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\Common Files\AOL\Launch\AOLLaunch.exe" /d locale=en-US ee://aol/imApp /HIDEBL
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: K-Meleon Loader.lnk = C:\Program Files\K-Meleon\loader.exe
O4 - Global Startup: Wireless-G Notebook Adapter with SpeedBooster Utility.lnk = C:\Program Files\Linksys\Wireless-G Notebook Adapter with SpeedBooster\Startup.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Viewpoint Search - res://C:\Program Files\Viewpoint\Viewpoint Toolbar\ViewBar.dll/CXTSEARCH.HTML
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: AT&T Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\PROGRA~1\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\PROGRA~1\AWS\WEATHE~1\Weather.exe (HKCU)
O16 - DPF: {2B96D5CC-C5B5-49A5-A69D-CC0A30F9028C} (MiniBugTransporterX Class) - http://download.weatherbug.com/minibug/tri…Transporter.cab?
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {CC05BC12-2AA2-4AC7-AC81-0E40F83B1ADF} (Live365Player Class) - http://www.live365.com/players/play365.cab
O16 - DPF: {DFABA77C-F8BB-4AB9-BED7-7D48AE103E24} - http://www.myfreeicons.com/cabs/bs4-htgy.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail
| Popular Categories<] c:\WINDOWS\System32\ | Popular Categories | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&side=1" class=category>Finance<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&side=1" class=category>Finance | [image unavailable: image]http://parked.directnic.com/images/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/spacer.gif" height=1 width=174> | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&side=1" class="category">Travel<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&side=1" class="category">Travel | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&side=1" class=category>Gifts<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&side=1" class=category>Gifts | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&side=1" class=category>Home<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&side=1" class=category>Home | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&side=1" class=category>Health<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&side=1" class=category>Health | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&side=1" class=category>Entertainment<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&side=1" class=category>Entertainment | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&side=1" class=category>Shopping<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&side=1" class=category>Shopping | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&side=1" class=category>Computing<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&side=1" class=category>Computing | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&side=1" class=category>Hobbies<] c:\WINDOWS\System32\ | [image unavailable: image]http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle>http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&side=1" class=category>Hobbies |